The Elsmar Cove Wiki More Free Files The Elsmar Cove Forums Discussion Thread Index Post Attachments Listing Failure Modes Services and Solutions to Problems Elsmar cove Forums Main Page Elsmar Cove Home Page
Google
  Web Elsmar.com
*Please be aware that SOME RECENT forum threads may not yet be indexed by Google.

View Full Version : ISO certification guidelines for Software Company


SandeepS
27th January 2009, 02:23 AM
HI,
We are currenlty in a process of getting ISO certification for our company(Software firm).
Since we dont have much of the experince in getting this done and is a high priority also,it would of real help if you can help us with this.


-Sandeep

Sidney Vianna
27th January 2009, 02:39 AM
If you have SPECIFIC questions, you will probably get help.

SandeepS
27th January 2009, 02:48 AM
HI Sidney,
The question is very specific,i looking for some helping guidelines/sample docs to start up with the QMS process.
we are going for the first auditing on feb 22nd,before that we need to have all the QMS related docs in place.
I wanna know,how and what i need to do get this accomplished.

Thanks Sandeep

Marc
27th January 2009, 05:18 AM
You say you are in the process of getting ISO certification. WHERE in the process? Just starting? Half way through?

What Sidney is saying is there are lots and lots of existing discussions threads here in which implementation of ISO 9001 in companies is discussed. The first thing YOU have to do is read up on some of the basics. Then, when you come to a place where you need specific help, such as how an element applies to your company, ask.

Implementations are almost always basically the same - See: Implementing a QMS (http://elsmar.com/Imp/) for some general basics.

Don't underestimate the power of a Search here.

Some existing ISO 9001 Implementation discussion threads (http://Elsmar.com/Forums/search.php?do=process&titleonly=1&query=9001+implementation).

As for sample documentation, the same thing is true. There are hundreds of example procedures and other documentation here both in the 'Free Files Directory (http://Elsmar.com/pdf_files/)', as well as Files Attached to Posts (http://elsmar.com/Forums/fileslist.php).

If you are planning an audit in a month and you asking such a basic question, you may have significant problems.

howste
28th January 2009, 02:22 AM
we are going for the first auditing on feb 22nd,before that we need to have all the QMS related docs in place.

Is the audit you're talking about an internal audit, customer audit, or certification audit?

SandeepS
28th January 2009, 02:25 AM
HI,
I was talking about the internal and external audit both.
But before i jump in,i have started up with creating Work Instructions.
it would be really great if you can light up a bit on how can i start writing this for a software firm.

Sandeep

howste
28th January 2009, 02:49 AM
HI,
I was talking about the internal and external audit both.:eek: Is the external audit a 3rd party registrar or a customer? Either way, based on what I've read so far, there is no way your organization can be truly prepared in under a month. At the time of a registration audit, there should be at least 3-6 months of records demonstrating that your system is in place and working. This includes one or more full rounds of internal audits and management reviews.

But before i jump in,i have started up with creating Work Instructions.
it would be really great if you can light up a bit on how can i start writing this for a software firm.

Sandeep
ISO 9001 mentions work instructions, but that's not what the certification is all about.

Here's where I'd suggest that you start. First, look at clause 4.1 of ISO 9001. That's where you really start your implementation. Define the processes of your system and their interactions. The interactions should define the expected outputs of each process and should be linked to the inputs of other processs or the customer's needs.

Establish measurements for the process outputs, and define the controls needed to be able to achieve what's expected . Controls typically include competent personnel (in terms of education, training, skills, and experience), infrastructure (equipment, tooling, environment, etc), and documentation (which may include work instructions).

Top management should provide a policy statement and objectives which correlate with the process measurements. Obviously the rest of the requirements also need to be addressed, but this is the real "thought" behind the standard.